@cmgmyr/hive 1.7.0 → 1.9.0

package/dist/dashboard.js

@@ -799,7 +799,7 @@ const STYLE = `
   .muted { font-size: 0.8125rem; }
   .cap-note { display: flex; align-items: center; gap: 0.4rem; color: var(--fg-subtle);
     font-size: 0.78125rem; margin: 0 0 0.6rem; }
-  pre.board { white-space: pre; overflow: auto; max-height: 60vh; background: var(--panel-sunken);
+  pre.board { white-space: pre-wrap; overflow-wrap: anywhere; overflow: auto; max-height: 60vh; background: var(--panel-sunken);
     border: 1px solid var(--border); border-radius: var(--r-ctl); padding: 0.85rem;
     font-family: var(--font-mono); font-size: 0.8125rem; line-height: 1.5; margin: 0;
     overscroll-behavior: contain; }
@@ -999,6 +999,7 @@ const SCRIPT = `
         s.filterCaret = filterInput.selectionStart;
         save(s);
         applyFilter(filterInput.value);
+        paintStamp();
         deferReload();
       });
     }
@@ -1039,7 +1040,21 @@ const SCRIPT = `
       window.addEventListener("resize", function () { measureHeader(); paintNav(); });
     }
 
-    if (typeof state.scrollY === "number") window.scrollTo(0, state.scrollY);
+    function absTop(el) { return el.getBoundingClientRect().top + window.scrollY; }
+    var anchorEl = state.anchor && typeof state.anchor.id === "string"
+      ? document.getElementById(state.anchor.id) : null;
+    if (anchorEl && typeof state.anchor.offset === "number") {
+      window.scrollTo(0, absTop(anchorEl) + state.anchor.offset);
+    } else if (typeof state.scrollY === "number") {
+      window.scrollTo(0, state.scrollY);
+    }
+    var itemSel = "details.pad-item, details.todo-item";
+    var padItems = document.querySelectorAll("details.pad-item");
+    for (var pi = 0; pi < padItems.length; pi++) {
+      var saved = state.padScroll && state.padScroll[padItems[pi].id];
+      var padPre = padItems[pi].querySelector("pre.board");
+      if (padItems[pi].open && padPre && typeof saved === "number") padPre.scrollTop = saved;
+    }
 
     // Live toggle. Replaces <meta http-equiv="refresh">, which the browser
     // schedules at PARSE TIME - removing the tag afterward does not cancel it,
@@ -1056,39 +1071,75 @@ const SCRIPT = `
     function clearReload() {
       if (reloadTimer !== null) { clearTimeout(reloadTimer); reloadTimer = null; }
     }
-    // Typing restarts the 10s rather than suspending it, so "refreshes every
-    // 10s" stays true - it is measured from the last keystroke, not from load.
+    function anyItemOpen() {
+      var items = document.querySelectorAll(itemSel);
+      for (var i = 0; i < items.length; i++) {
+        var it = items[i];
+        if (it.open && !it.closest("details.section:not([open])") && !it.closest("[hidden]")) return true;
+      }
+      return false;
+    }
+    // Typing and scrolling restart the 10s rather than suspending it, so
+    // "refreshes every 10s" stays true; an open pad or todo suspends it.
     function deferReload() {
       if (!live) return;
       clearReload();
-      armReload();
+      if (!anyItemOpen()) armReload();
     }
     var toggle = document.getElementById("live-toggle");
     var stamp = document.getElementById("generated-stamp");
     var stampTime = stamp ? stamp.getAttribute("data-time") : "";
-    function paintStamp(live) {
+    var tail = " local. Read-only: nothing here writes back to the store.";
+    function paintStamp() {
       if (!stamp) return;
-      stamp.textContent = live
-        ? "generated " + stampTime + " local, refreshes every 10s. Read-only: nothing here writes back to the store."
-        : "paused, generated " + stampTime + " local. Read-only: nothing here writes back to the store.";
+      stamp.textContent = !live
+        ? "paused, generated " + stampTime + tail
+        : anyItemOpen()
+          ? "paused while a pad or todo is open, generated " + stampTime + tail
+          : "generated " + stampTime + " local, refreshes every 10s. Read-only: nothing here writes back to the store.";
     }
     var live = typeof state.live === "boolean" ? state.live : true;
     if (toggle) toggle.checked = live;
-    paintStamp(live);
-    if (live) armReload(); else clearReload();
+    paintStamp();
+    deferReload();
+    var items = document.querySelectorAll(itemSel);
+    for (var ii = 0; ii < items.length; ii++) {
+      items[ii].addEventListener("toggle", function () { paintStamp(); deferReload(); });
+    }
+    var sectionEls = document.querySelectorAll("details.section");
+    for (var si = 0; si < sectionEls.length; si++) {
+      sectionEls[si].addEventListener("toggle", function () { paintStamp(); deferReload(); });
+    }
     if (toggle) {
       toggle.addEventListener("change", function () {
         var s = load();
-        s.live = toggle.checked;
+        live = toggle.checked;
+        s.live = live;
         save(s);
-        paintStamp(toggle.checked);
-        if (toggle.checked) armReload(); else clearReload();
+        paintStamp();
+        if (live) deferReload(); else clearReload();
       });
     }
+    window.addEventListener("scroll", function () {
+      if (reloadTimer !== null) deferReload();
+    }, { passive: true });
 
     window.addEventListener("beforeunload", function () {
       var s = load();
       s.scrollY = window.scrollY;
+      s.anchor = null;
+      var secs = document.querySelectorAll("details.section");
+      for (var k = 0; k < secs.length; k++) {
+        if (secs[k].getBoundingClientRect().top <= headerOffset) {
+          s.anchor = { id: secs[k].id, offset: window.scrollY - absTop(secs[k]) };
+        }
+      }
+      s.padScroll = {};
+      var openPads = document.querySelectorAll("details.pad-item");
+      for (var m = 0; m < openPads.length; m++) {
+        var pre = openPads[m].querySelector("pre.board");
+        if (openPads[m].open && pre && pre.scrollTop > 0) s.padScroll[openPads[m].id] = pre.scrollTop;
+      }
       if (filterInput) {
         s.filterFocused = document.activeElement === filterInput;
         s.filterCaret = filterInput.selectionStart;

package/dist/db.js

@@ -408,6 +408,13 @@ CREATE TABLE queen_audit (
   CHECK(home_project_id != target_project_id)
 );
 CREATE INDEX idx_queen_audit_target ON queen_audit(target_project_id, id);
+`,
+    `
+ALTER TABLE agents ADD COLUMN claude_messaging_socket TEXT NOT NULL DEFAULT '';
+ALTER TABLE agents ADD COLUMN claude_messaging_pane_pid TEXT NOT NULL DEFAULT '';
+ALTER TABLE wakes ADD COLUMN delivery_method TEXT;
+ALTER TABLE wakes ADD COLUMN socket_attempt_at TEXT;
+ALTER TABLE wakes ADD COLUMN socket_delivery_note TEXT;
 `,
 ];
 export function storeSchemaAhead(database) {

package/dist/hook.js

@@ -185,6 +185,21 @@ async function stopProcessesForEndedLead(actorId, payload) {
     const { stopAllProcesses, STOP_REASONS } = await import("./processes.js");
     stopAllProcesses(row.project_id, STOP_REASONS.leadSessionEnded);
 }
+// Bound to the pid of the pane this hook runs in, not to agents.pane_pid: on a fresh launch this can
+// run before cmdLead records the new pane. The scheduler uses it only when the two pids agree.
+async function registerLeadMessagingSocket(actorId) {
+    const raw = process.env.CLAUDE_CODE_MESSAGING_SOCKET ?? "";
+    const pane = process.env.TMUX_PANE ?? "";
+    let socket = isAbsolute(raw) && !raw.includes("\0") ? raw : "";
+    let pid = "";
+    if (socket !== "" && pane !== "") {
+        const { panePidForRecord } = await import("./tmux.js");
+        pid = panePidForRecord(pane);
+    }
+    if (pid === "")
+        socket = "";
+    db.prepare("UPDATE agents SET claude_messaging_socket = ?, claude_messaging_pane_pid = ? WHERE actor_id = ? AND kind = 'lead' AND status = 'running'").run(socket, pid, actorId);
+}
 function reconcileSessionId(actorId, payload) {
     const sessionId = typeof payload.session_id === "string" ? payload.session_id : "";
     if (!sessionId)
@@ -306,6 +321,13 @@ try {
             catch {
             }
         }
+        if (event === "session_start" && process.env.HIVE_LEAD === "1") {
+            try {
+                await registerLeadMessagingSocket(actorId);
+            }
+            catch {
+            }
+        }
         if (event === "session_end") {
             try {
                 await stopProcessesForEndedLead(actorId, readPayload());

package/dist/hooks.js

@@ -22,6 +22,20 @@ export function ensureHooksFile() {
     writeFileSync(path, JSON.stringify(settings, null, 2) + "\n");
     return path;
 }
+// Off returns the store-wide file unchanged. On writes a per-project file, because hooks.json is shared
+// by every project's lead and an accept there would reach leads that never opted in.
+export function ensureLeadHooksFile(projectId, quietMessaging) {
+    if (!quietMessaging)
+        return ensureHooksFile();
+    const base = stateHookSettings();
+    const settings = {
+        hooks: { ...base.hooks, SessionStart: [hookEntry("session_start")] },
+        crossSessionInbound: "accept",
+    };
+    const path = join(dataDir, `lead-${projectId}-hooks.json`);
+    writeFileSync(path, JSON.stringify(settings, null, 2) + "\n");
+    return path;
+}
 function stateHookSettings() {
     return {
         hooks: {

package/dist/projectYml.js

@@ -18,6 +18,7 @@ export const BUILT_IN_PROJECT_YML = Object.freeze({
     context_checkpoint_percent: null,
     lead_turn_budget: null,
     dashboard: false,
+    quiet_messaging: false,
     vars: Object.freeze({}),
     processes: Object.freeze({}),
 });
@@ -198,6 +199,19 @@ function applyLayer(root, path, source, config, sources, warnings) {
         else
             warn(`dashboard must be true or false; ignoring "${String(value)}".`);
     }
+    if (has("quiet_messaging")) {
+        const value = root.quiet_messaging;
+        if (value == null) {
+            config.quiet_messaging = false;
+            sources.quiet_messaging = source;
+        }
+        else if (typeof value === "boolean") {
+            config.quiet_messaging = value;
+            sources.quiet_messaging = source;
+        }
+        else
+            warn(`quiet_messaging must be true or false; ignoring "${String(value)}".`);
+    }
     if (has("agents")) {
         const value = root.agents;
         if (value == null) {

package/dist/queenDashboard.js

@@ -444,7 +444,7 @@ a.proj:hover { color: var(--accent); text-decoration: underline; text-underline-
 .c-brief li { counter-increment: pick; font-size: 0.875rem; min-width: 0; overflow-wrap: anywhere; }
 .c-brief li::before { content: counter(pick); font-family: var(--font-mono); font-weight: 650; color: var(--accent); margin-right: 0.4rem; }
 .c-brief .why { display: block; color: var(--fg-muted); font-size: 0.8125rem; margin-top: 0.15rem; }
-.brief-summary, .brief-empty { margin: 0; font-size: 0.875rem; color: var(--fg-muted); grid-column: 2; }
+.brief-summary, .brief-empty { margin: 0; font-size: 0.875rem; color: var(--fg-muted); grid-column: 2; min-width: 0; overflow-wrap: anywhere; }
 .brief-summary { color: var(--fg); }
 @media (max-width: 52rem) {
   .c-brief { grid-template-columns: minmax(0, 1fr); }

package/dist/scheduler.js

@@ -17,6 +17,8 @@ import { awaitingFirstPrompt, awaitingFirstPromptSql } from "./firstPrompt.js";
 import { evaluateLeadWatch, leadSubscription } from "./leadWatch.js";
 import { describeLiveTasks, describeOneTask, liveBackgroundTasks, STALL_BOUND_SECONDS, } from "./backgroundTasks.js";
 import { MESSAGE_MAX_ROWS, MESSAGE_RETENTION } from "./leadMessage.js";
+import { CROSS_SESSION_CLOSE, postClaudeWake, senderAddress, SOCKET_WAKE_FOOTER } from "./claudeWake.js";
+import { readLeadTurnState } from "./leadState.js";
 import { harnessFor, hasTranscriptSignal, paneClassifierFor, screenClassifiable, transcriptDirFor } from "./harnesses.js";
 import { transcriptDir, readContextFill } from "./transcript.js";
 import { ageSecondsSince, describeLastLogEvent, humanizeAge, lastLogEvent, reportsAgentStateLog, } from "./stateProvenance.js";
@@ -32,7 +34,9 @@ const DELIVER_ROW_COLUMNS = `COALESCE(agents.tmux_socket, '') AS deliver_socket,
   COALESCE(agents.pane_pid, '') AS deliver_pane_pid,
   COALESCE(agents.command, '') AS deliver_command,
   agents.id AS deliver_row_id, agents.status AS deliver_row_status,
-  COALESCE(agents.tmux_target, '') AS deliver_row_target`;
+  COALESCE(agents.tmux_target, '') AS deliver_row_target,
+  COALESCE(agents.claude_messaging_socket, '') AS deliver_messaging_socket,
+  COALESCE(agents.claude_messaging_pane_pid, '') AS deliver_messaging_pane_pid`;
 // A row's pid certifies only the pane that row records, never a different deliver_pane.
 const deliveryIdentity = (row) => ({
     tmux_target: row.deliver_pane,
@@ -455,18 +459,15 @@ function maybeGenerateDashboards() {
     }
 }
 export function checkConfirmations() {
-    const confirmationQuery = `
-       SELECT MIN(created_at) FROM agent_state_log
-        WHERE actor_id = wakes.deliver_actor AND event = 'prompt' AND created_at >= wakes.typed_at
-          AND (payload LIKE '%[hive wake #' || wakes.id || ']%'
-               OR payload LIKE '%[hive wake #' || wakes.id || ',%')`;
+    const sentAt = "COALESCE(wakes.socket_attempt_at, wakes.typed_at)";
+    const confirmationQuery = promptEvidenceSql(sentAt);
     try {
         const pending = stmt(`SELECT 1 AS hit FROM wakes
-        WHERE typed_at IS NOT NULL AND confirmed_at IS NULL AND typed_at >= datetime('now', ?) LIMIT 1`).get(LOG_RETENTION);
+        WHERE ${sentAt} IS NOT NULL AND confirmed_at IS NULL AND ${sentAt} >= datetime('now', ?) LIMIT 1`).get(LOG_RETENTION);
         if (!pending)
             return;
         stmt(`UPDATE wakes SET confirmed_at = (${confirmationQuery})
-       WHERE typed_at IS NOT NULL AND confirmed_at IS NULL AND typed_at >= datetime('now', ?)
+       WHERE ${sentAt} IS NOT NULL AND confirmed_at IS NULL AND ${sentAt} >= datetime('now', ?)
          AND EXISTS (${confirmationQuery.replace("MIN(created_at)", "1")})`).run(LOG_RETENTION);
     }
     catch {
@@ -511,6 +512,7 @@ export async function tick(snapshot) {
             else
                 await maybeFireIdle(timer, snapshot, now, choices);
         }
+        await retryUnconfirmedSocketWakes(snapshot, choices);
     }
     catch {
     }
@@ -570,7 +572,8 @@ function holdTimer(timer, reason) {
     bestEffortRun(`UPDATE wakes SET held_at = datetime('now'), held_reason = ?,
        first_held_at = COALESCE(CASE WHEN held_at IS NULL THEN NULL ELSE first_held_at END, datetime('now'))
      WHERE id = ? AND cancelled_at IS NULL
-       AND (fired_at IS NULL OR (repeat_every_ms IS NOT NULL AND due_at = ?))`, reason, timer.id, timer.due_at);
+       AND (fired_at IS NULL OR (repeat_every_ms IS NOT NULL AND due_at = ?)
+         OR (${socketAwaitingWhere()}))`, reason, timer.id, timer.due_at);
 }
 const HELD_REASON_MODAL_CHOICE = "pane is awaiting a modal choice (folder-trust or /model picker)";
 export const HELD_REASON_LEAD_PANE_DEAD = "the lead's pane is not live right now (likely mid-restart); lead-owned wakes are exempt from " +
@@ -931,7 +934,7 @@ const STANDING_EXPIRED_NOTE = "this standing watch has expired and nothing is wa
 const unreported = (condition, episode) => `NOT EXISTS (
     SELECT 1 FROM wake_idle_notices n LEFT JOIN wakes nt ON nt.id = n.notice_wake_id
      WHERE n.wake_id = ? AND n.agent_id = a.id AND n.condition = '${condition}' AND n.episode = ${episode}
-       AND NOT (nt.fired_at IS NOT NULL AND nt.typed_at IS NULL AND nt.cancelled_at IS NULL
+       AND NOT (nt.fired_at IS NOT NULL AND COALESCE(nt.typed_at, nt.socket_attempt_at) IS NULL AND nt.cancelled_at IS NULL
                 AND nt.fired_at < datetime('now', '${NOTICE_RETRY_AFTER}')))`;
 const CREW_COLUMNS = `a.id, a.name, a.actor_id, a.tmux_target, a.tmux_socket, a.pane_pid, a.agent_state,
    a.state_changed_at, a.status, a.command, a.kind, a.resumed_at, a.closed_at,
@@ -1174,7 +1177,7 @@ function rearmSpentEpisode(timerId, agentId, condition, episode) {
       WHERE wake_id = ? AND agent_id = ? AND condition = ? AND episode = ?
         AND notice_wake_id IS NOT NULL
         AND EXISTS (SELECT 1 FROM wakes t WHERE t.id = wake_idle_notices.notice_wake_id
-                      AND t.fired_at IS NOT NULL AND t.typed_at IS NULL AND t.cancelled_at IS NULL
+                      AND t.fired_at IS NOT NULL AND COALESCE(t.typed_at, t.socket_attempt_at) IS NULL AND t.cancelled_at IS NULL
                       AND t.fired_at < datetime('now', '${NOTICE_RETRY_AFTER}'))`).run(timerId, agentId, condition, episode);
 }
 function claimEpisode(timerId, agentId, condition, episode) {
@@ -1892,10 +1895,69 @@ function recordLostAfterClaim(timer, pasted, why) {
        cancelled_at = CASE WHEN repeat_every_ms IS NULL THEN datetime('now') ELSE cancelled_at END
      WHERE id = ?`, HELD_REASON_OWNERSHIP_LOST_AFTER_CLAIM + why + (pasted ? " The body was pasted; no Enter was sent." : ""), pasted ? 1 : 0, timer.id);
 }
-async function deliver(timer, note, choices, typedSeen, firstHeldAt, owner) {
+export const DELIVERY_METHOD = { socket: "socket", pty: "pty", ptyAfterSocketTimeout: "pty-after-socket-timeout" };
+export const socketAwaitingWhere = (prefix = "") => `${prefix}delivery_method = '${DELIVERY_METHOD.socket}' AND ${prefix}confirmed_at IS NULL AND ${prefix}typed_at IS NULL AND ${prefix}cancelled_at IS NULL`;
+const SOCKET_CONFIRM_GRACE_SECONDS = 60;
+const withReDelivered = (note) => (note ? `${note}, re-delivered` : "re-delivered");
+const promptEvidenceSql = (lowerBound) => `
+       SELECT MIN(created_at) FROM agent_state_log
+        WHERE actor_id = wakes.deliver_actor AND event = 'prompt' AND created_at >= ${lowerBound}
+          AND (payload LIKE '%[hive wake #' || wakes.id || ']%'
+               OR payload LIKE '%[hive wake #' || wakes.id || ',%')`;
+function quietMessagingOn(projectId) {
+    const project = stmt("SELECT path FROM projects WHERE id = ?").get(projectId);
+    return project !== undefined && loadProjectYml(project.path).config?.quiet_messaging === true;
+}
+// Only a one-shot wake to a live, row-owned Claude lead whose socket was registered by this pane epoch.
+function socketRoute(timer, owner) {
+    return (owner !== null &&
+        timer.repeat_every_ms == null &&
+        isLeadActorId(timer.deliver_actor) &&
+        harnessFor(timer.deliver_command).name === "claude" &&
+        timer.deliver_messaging_socket !== "" &&
+        timer.deliver_messaging_pane_pid !== "" &&
+        timer.deliver_messaging_pane_pid === timer.deliver_pane_pid &&
+        timer.deliver_row_target === timer.deliver_pane &&
+        quietMessagingOn(timer.project_id));
+}
+function socketStillRegistered(timer, owner) {
+    requireStillOwned(owner.rowId, owner.identity, `wake #${timer.id} socket delivery`);
+    const row = stmt(`SELECT claude_messaging_socket AS socket, claude_messaging_pane_pid AS pid, pane_pid FROM agents
+      WHERE id = ? AND status = 'running' AND kind = 'lead'`).get(owner.rowId);
+    const wake = stmt("SELECT 1 AS live FROM wakes WHERE id = ? AND cancelled_at IS NULL").get(timer.id);
+    return (wake !== undefined &&
+        row !== undefined &&
+        row.socket === timer.deliver_messaging_socket &&
+        row.pid === timer.deliver_messaging_pane_pid &&
+        row.pid === row.pane_pid);
+}
+async function deliver(timer, note, choices, typedSeen, firstHeldAt, owner, fallback = false) {
     const tail = watchedTail(timer);
-    const prefix = `[hive wake #${timer.id}${note ? `, ${note}` : ""}] `;
     const body = (isLeadActorId(timer.deliver_actor) ? shortRenderForLeadDelivery(timer) : null) ?? timer.body;
+    const staleness = noticeStalenessNote(timer);
+    if (!fallback && socketRoute(timer, owner)) {
+        const text = `[hive wake #${timer.id}${note ? `, ${note}` : ""}] ${body + staleness + tail}\n\n${SOCKET_WAKE_FOOTER}`;
+        if (!text.includes(CROSS_SESSION_CLOSE)) {
+            bestEffortRun(`UPDATE wakes SET socket_attempt_at = strftime('%Y-%m-%d %H:%M:%f', 'now'), socket_delivery_note = ?,
+           delivery_method = ?, first_held_at = ?, held_at = NULL, held_reason = NULL, confirmed_at = NULL
+         WHERE id = ?`, note, DELIVERY_METHOD.socket, firstHeldAt, timer.id);
+            const posted = await postClaudeWake({
+                socketPath: timer.deliver_messaging_socket,
+                senderAddress: senderAddress(join(dataDir, "wake-sender.sock")),
+                text,
+                beforeWrite: () => socketStillRegistered(timer, owner),
+            });
+            if (posted) {
+                forgetPaneAnswers(timer.deliver_pane, choices);
+                return;
+            }
+            note = withReDelivered(note);
+            fallback = true;
+        }
+    }
+    const prefix = `[hive wake #${timer.id}${note ? `, ${note}` : ""}] ` +
+        (fallback ? `If you already handled wake #${timer.id}, ignore this.\n` : "");
+    const method = fallback ? DELIVERY_METHOD.ptyAfterSocketTimeout : DELIVERY_METHOD.pty;
     let typedBusy;
     try {
         const lastEvent = lastLogEvent(timer.deliver_actor);
@@ -1905,19 +1967,23 @@ async function deliver(timer, note, choices, typedSeen, firstHeldAt, owner) {
         typedBusy = null;
     }
     const recordTyped = () => bestEffortRun(`UPDATE wakes SET typed_at = strftime('%Y-%m-%d %H:%M:%f', 'now'), typed_busy = ?,
-         typed_seen = ?, first_held_at = ?, held_at = NULL, held_reason = NULL, confirmed_at = NULL
-       WHERE id = ?`, typedBusy, typedSeen, firstHeldAt, timer.id);
+         typed_seen = ?, first_held_at = ?, held_at = NULL, held_reason = NULL, delivery_method = ?,
+         confirmed_at = CASE WHEN socket_attempt_at IS NULL THEN NULL ELSE confirmed_at END
+       WHERE id = ?`, typedBusy, typedSeen, firstHeldAt, method, timer.id);
     const box = cacheEntry(timer.deliver_pane, choices).box;
     const strandedTextWouldHold = box !== undefined && box !== null && box.state !== "unknown";
     let pasted = false;
     try {
-        await sendText(timer.deliver_pane, prefix + body + noticeStalenessNote(timer) + tail, true, () => {
+        await sendText(timer.deliver_pane, prefix + body + staleness + tail, true, () => {
             pasted = true;
             if (strandedTextWouldHold)
                 recordTyped();
         }, undefined, owner ? () => requireStillOwned(owner.rowId, owner.identity, `wake #${timer.id} delivery`) : undefined);
     }
     catch (err) {
+        if (fallback && !pasted) {
+            bestEffortRun("UPDATE wakes SET delivery_method = ? WHERE id = ? AND typed_at IS NULL", DELIVERY_METHOD.socket, timer.id);
+        }
         if (!(err instanceof PaneOwnershipLost))
             throw err;
         recordLostAfterClaim(timer, pasted, err.message);
@@ -1929,6 +1995,41 @@ async function deliver(timer, note, choices, typedSeen, firstHeldAt, owner) {
     if (!strandedTextWouldHold)
         recordTyped();
 }
+// Measured from the lead's first turn end after the post, because a busy lead reads the post only then.
+function socketFallbackDue(timer) {
+    const firstStop = stmt("SELECT MIN(created_at) AS t FROM agent_state_log WHERE actor_id = ? AND event = 'stop' AND created_at >= ?").get(timer.deliver_actor, timer.socket_attempt_at).t;
+    let from = firstStop;
+    if (from === null) {
+        const turn = timer.deliver_row_id === null ? null : readLeadTurnState(timer.deliver_row_id);
+        if (turn !== null && turn.state === "working" && turn.pane_pid === timer.deliver_pane_pid)
+            return false;
+        from = timer.socket_attempt_at;
+    }
+    return stmt("SELECT (julianday('now') - julianday(?)) * 86400 >= ? AS due").get(from, SOCKET_CONFIRM_GRACE_SECONDS).due === 1;
+}
+async function fallbackClaimed(timer, snapshot, choices) {
+    const decision = deliverable(timer, snapshot, choices);
+    if (!decision.ok)
+        return false;
+    const claimed = stmt(`UPDATE wakes SET delivery_method = ?
+        WHERE id = ? AND ${socketAwaitingWhere()}
+          AND NOT EXISTS (${promptEvidenceSql("wakes.socket_attempt_at").replace("MIN(created_at)", "1")})`).run(DELIVERY_METHOD.ptyAfterSocketTimeout, timer.id).changes === 1;
+    if (!claimed)
+        return false;
+    await deliver(timer, withReDelivered(timer.socket_delivery_note), choices, decision.typedSeen, decision.firstHeldAt, decision.owner, true);
+    return true;
+}
+async function retryUnconfirmedSocketWakes(snapshot, choices) {
+    const awaiting = stmt(`SELECT wakes.*, ${DELIVER_ROW_COLUMNS}
+       FROM wakes ${DELIVER_SOCKET_JOIN}
+      WHERE ${socketAwaitingWhere("wakes.")}
+        AND wakes.socket_attempt_at >= datetime('now', ?)`).all(LOG_RETENTION);
+    for (const timer of awaiting) {
+        if (!socketFallbackDue(timer))
+            continue;
+        await withPaneClaim(timer, () => fallbackClaimed(timer, snapshot, choices));
+    }
+}
 export const DEFAULT_SCHEDULER_INTERVAL_MS = 3000;
 const MIN_SCHEDULER_INTERVAL_MS = 100;
 // Node clamps a setInterval delay above this to 1ms.

package/dist/tools/wakes.js

@@ -102,7 +102,7 @@ function deliveryState(t, hasChannel) {
         held_at: t.held_at,
         held_reason: t.held_reason,
         confirmed_at: t.confirmed_at,
-        confirmation: t.typed_at == null
+        confirmation: t.typed_at == null && t.socket_attempt_at == null
             ? null
             : t.confirmed_at != null
                 ? "confirmed"
@@ -111,6 +111,8 @@ function deliveryState(t, hasChannel) {
                     : t.typed_busy === 1
                         ? "unconfirmed_busy"
                         : "unconfirmed",
+        delivery_method: t.delivery_method,
+        socket_attempt_at: t.socket_attempt_at,
     };
 }
 export const truncateBody = (body) => body.length > 120 ? `${cutToUnitBudget(body, 120)}…` : body;
@@ -484,7 +486,8 @@ export function registerWakes(server) {
     server.registerTool("wake_get", {
         description: "Read one wake-up by id, in this project, with its UNTRUNCATED body. wake_list truncates " +
             "body at 120 chars; use this to see exactly what a wake will say, or to confirm what " +
-            "wake_update just changed.",
+            "wake_update just changed. Its delivery state includes delivery_method (socket, pty or " +
+            "pty-after-socket-timeout) and socket_attempt_at, set when a wake was posted to a Claude lead's socket.",
         annotations: {
             readOnlyHint: false,
             destructiveHint: false,
@@ -623,7 +626,7 @@ export function registerWakes(server) {
     server.registerTool("wake_list", {
         description: "List pending wake-ups in this project, plus recently_delivered: the last " +
             `${RECENTLY_FIRED_LIMIT} one-shot wakes that have already fired, with their delivery ` +
-            "state (typed_at, held_at/held_reason, confirmation). A one-shot wake leaves the " +
+            "state (typed_at, held_at/held_reason, confirmation, delivery_method, socket_attempt_at). A one-shot wake leaves the " +
             "pending list the moment it fires; recently_delivered is where to check whether it " +
             "was actually typed and, if its target has a confirmation channel, acknowledged.",
         annotations: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cmgmyr/hive",
-  "version": "1.7.0",
+  "version": "1.9.0",
   "description": "Run a crew of Claude Code and Codex workers from one lead session: visible tmux panes, exact state from hooks, one local SQLite store.",
   "type": "module",
   "bin": {

package/profiles/orchestration/posture.md

@@ -1,27 +1,18 @@
-You are the lead of a hive crew. You hold the plan, the workers do the work.
+You are the lead of a hive crew. You hold the plan, the workers do the work, and you accept or reject what they hand back.
 
-- Lead, do not IC. Before writing code yourself, ask whether this belongs to a
-  worker. Small edits and integration are yours; a lane of real work is not.
-- Name the lane before acting. Ticket work, ad-hoc change, review, research,
-  and smoke test have different rules. Say which one you are in, out loud.
-- Ambiguity is a question, not a guess. One good question up front beats a
-  worker rebuilding the wrong thing for an hour.
-- Plans go in pads, work goes in todos, decisions go in comments. Sessions
-  die; the store survives. Anything you would have to re-explain tomorrow
-  belongs in the store today.
-- Carry a short label with any todo or pad id you show anyone: the todo's
-  slug, the pad's name - "todo 318 (give todos a slug)", not "todo 318".
-  This holds in wake bodies and board entries too, not only in chat, since a
-  cold-booting session gets no other context to fill the gap. Give a todo
-  one when you create it: todo_create takes `slug` directly.
-- Give a worker a self-contained brief: the objective, its pad and todo ids,
-  the files it owns, and how it will know it is done.
-- Do not poll workers. With more than one running, set
-  wake_when_idle(scope="project") once and go quiet: it keeps watching and
-  reports each worker as it finishes. Waiting is free; a status loop is not.
-- Read real output before believing a worker. agent_output and the actual
-  diff, not the worker's summary of them.
-- Anything outward-facing (pushes, published PRs, posted reviews, anything
-  that leaves the machine) waits for explicit human approval.
-- When the human asks how work runs here, read the project runbook first:
-  `hive runbook`. It is the standing process for this project.
+- Name the lane before acting: change, research, review or smoke test. Each ends differently, and a worker told the wrong ending builds the wrong thing.
+- Ambiguity is a question, not a guess. One good question up front beats a worker rebuilding the wrong thing for an hour.
+- Dispatch by assigning todo ids. Nobody takes work off the shared queue by itself, or two workers end up on one task.
+- Give a worker a brief it can follow cold: goal, decisions already made, files it owns, what is out of scope, base, checks, and the observable result that means done. A vague brief makes the worker invent scope.
+- Keep every lane isolated: its own worktree for file edits, a lease for any shared runtime such as a dev database or a port. Two lanes in one checkout overwrite each other.
+- Plans go in pads, work goes in todos, decisions go in comments. Sessions die; the store survives.
+- Carry a short label with any todo or pad id you show anyone: "todo 318 (give todos a slug)", not "todo 318". A cold-booting session gets no other context.
+- Do not poll workers. With more than one running, set wake_when_idle(scope="project") once and go quiet; a status loop costs more than waiting.
+- Read the real diff and run the change yourself before you accept it. A worker's summary is a claim, not evidence.
+- Only you complete a todo, and only after you have accepted it. Code-done is not lane-done.
+- Outward-facing actions (pushes, PRs, posted comments, merges, tracker updates) need authority the human has already given or gives now. Approval in one place does not carry to another.
+- Run yourself on the strongest model tier you have, the model in your lead command, and spawn workers on a cheaper one with agent_spawn's `model` argument. Running every worker on the strongest tier spends it on work a cheaper one finishes.
+<!--if:worker_model-->
+- Default worker model: {{worker_model}}.
+<!--end-->
+- When the human asks how work runs here, run `hive runbook`. It is the standing process.